nathanphelps/claude-voice-mcp

Python·14 files·commit 9393b6c·scanned 3d ago·cached ✓

85/100

MALICIOUS

Matches known-malicious patterns. Do not clone or install.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?

threat-state: maliciouslive

FINDINGS ░▒▓

criticalRemote script piped into a shellA shell script downloads remote content and executes it directly (e.g. `curl … | bash`). The payload is never stored or reviewable and can change server-side — a classic malware/backdoor install pattern.install.sh

    echo "[..] Installing uv..."
    curl -LsSf https://astral.sh/uv/install.sh | sh
    export PATH="$HOME/.local/bin:$PATH"
    if command -v uv &>/dev/null; then

+10

infoSuspicious file in repoExecutable file (install.ps1) in repositoryinstall.ps1+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

6 files scanned @ 9393b6c | 8/21/2026 | heuristic scan — always review manually

risk by category

code execution10

network & exfiltration0

file system access0

obfuscation0

supply chain2

owasp / injection0

telemetry

files 6/14rules hit 2engine v5commit 9393b6c

github

nathanphelps/claude-voice-mcp

Text-to-speech plugin for Claude Code using Kokoro neural TTS

Python

206d

14 files

6 scanned(43%)

9393b6c

architecture░▒▓

entry (0) flagged (0) pkg (5)

6 nodes · 5 edgesscroll to zoom · click node to jump to finding